From owner-freebsd-questions@freebsd.org Fri Oct 28 11:40:37 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 61C03C252CD for ; Fri, 28 Oct 2016 11:40:37 +0000 (UTC) (envelope-from basarevych@gmail.com) Received: from mail-yw0-x22a.google.com (mail-yw0-x22a.google.com [IPv6:2607:f8b0:4002:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2AB7AD0B for ; Fri, 28 Oct 2016 11:40:37 +0000 (UTC) (envelope-from basarevych@gmail.com) Received: by mail-yw0-x22a.google.com with SMTP id w3so78720649ywg.1 for ; Fri, 28 Oct 2016 04:40:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=SW/ceWWp86sLMijl0OAe8OE02aTlw9DindfPImJm6dY=; b=QXjrb4/7hK3ISzz4VrtOJGyrVbxMiEQC1Ls57/BQPIcaywkQtPcYVq0rbO5z/F6WJx hqVSgFM31xTyrNzQuFavziFufjvJ1KTmPyC1q+qHfTA7lzPLLa2gaEPnbarp5EYT/7vZ 4Of+2bprljXocwHM26GoIgj8ZXIM1jn1WDQVrCq3B1LswIChOJY873Lyd58bvZKJUT6j NpzSZa+9wFLVAk4cjILcKw/LSWky27FlY7zFU9a1fxRM3kKKpKW2K1xAp/sxrYMuXleY vHdsTc/rATqKb4QU5Okh586eqc7x6wZ9oThiW+7JVGsRXCqVlCdVlOMFYWg+icl1Bi/G YiiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=SW/ceWWp86sLMijl0OAe8OE02aTlw9DindfPImJm6dY=; b=mcPD13R0kYWUmrgD8RE3G3K6onoZbxHqCExljpR99wmAa7YlXsb1aCkMg8b001R8Xs MKb24yXCkmrg5tc2Jkcym1Qv+aj5pEl2vSrZ6sbgaOiv87iVk0aKiKztr151Qqnb/9BQ RyzLHuxwytQFw+WFNKa+0/8qFhgb2SFEla/cwGEJU3YhbspNj53dboV7ZRGAOjcXij0S Jx7dQYr2YrBpStiqzgoI5xqwgyuL9e+1NqxAevEUIcQyJg6RauflTbp61iRYz8J0boH2 yjbiow1wgIP6Mdu9/vTouvCMhP37SUGFd/EDeQHjKAdmIbRGdyRLaWOz1TzNOKcSipYS cjYg== X-Gm-Message-State: ABUngveKwIIcclVJX/bMvOhm1GYkRtCX7MAdX7HqWCvZgcZlnC3CEFqkScDMc48yiZZAE8NGfIlB0j1oiBqGpg== X-Received: by 10.36.93.83 with SMTP id w80mr1369734ita.90.1477654836136; Fri, 28 Oct 2016 04:40:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.59.10 with HTTP; Fri, 28 Oct 2016 04:40:35 -0700 (PDT) From: Ross Date: Fri, 28 Oct 2016 14:40:35 +0300 Message-ID: Subject: Mounting Kerberized NFS at boot To: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Oct 2016 11:40:37 -0000 Hello I have NIS, Kerberos and NFSv4. Exported shares use sec=krb5i, and it seems in order to mount these you have to have a Kerberos ticket. And root while booting the client system does not. So far I ended up putting this to rc.local: kinit -t /etc/krb5.keytab host/myhostname.lan mount /home mount /storage And those mounts are set to "noauto" in fstab. It works. But is there a better way to do it? I mean without kinit in rc.local and only using fstab?